Custom domain stuck in inaccessible tenant – request domain release

Thorsten Eberhardt 0 Reputation points Microsoft Employee
2026-04-13T12:00:57.0166667+00:00

My custom domain is stucked in an old and de-authenticated tenant.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Newest
Most helpful Newest Oldest

  1. AI answer

    2026-04-13T12:01:12.6366667+00:00

    A custom domain can only be verified in one Microsoft Entra tenant at a time. If the domain is still attached to an old or inaccessible tenant, it must be removed from that tenant before it can be added to a new one.

    Take these steps:

    1. Confirm the problem
      • In the new tenant, go to Microsoft Entra admin center → Entra ID → Domain names → Add custom domain and enter the domain.
      • If verification fails and the domain is reported as already in use, it is still registered in another directory.
    2. Check if the old tenant is inactive or blocked
      • If sign-in to the old tenant shows AADSTS5000225: This tenant has been blocked due to inactivity, the tenant is in an inaccessible state.
      • Administrators can request reactivation within 20 days of the tenant entering this state. After 20 days, the tenant is deleted and not recoverable.
    3. If within 20 days of inactivity
      • Have a tenant administrator contact Microsoft using the global support phone numbers to request tenant reactivation.
      • After reactivation, sign in to the old tenant, go to Entra ID → Domain names, and delete the custom domain from that tenant.
      • Then add and verify the domain in the new tenant via Entra ID → Domain names → Add custom domain.
    4. If more than 20 days have passed
      • The tenant is deleted and cannot be recovered. Microsoft’s documented behavior is that tenants remaining inaccessible for more than 20 days are deleted.
      • In this case, direct self-service removal of the domain from the old tenant is not possible. Contact Microsoft support and provide tenant and domain details so they can investigate domain release options.
    5. Follow domain hygiene best practices going forward
      • Before expiring or transferring a domain at the registrar, delete it from the Microsoft Entra tenant.
      • Microsoft does not allow a domain name to be verified with more than one Microsoft Entra tenant at the same time. Once deleted, it cannot be re-added to the same tenant if another tenant later verifies it.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.